SergeyandGitHub
0ba029b015
* chore(release): build once, and publish sha256sums and provenance (epic #701, phase 5) * chore(ci): pin every third-party action by commit sha (epic #701, phase 5) * test(ci): anchor the dependabot guard on the ecosystem it must cover
21 lines
562 B
YAML
21 lines
562 B
YAML
name: Welcome
|
|
|
|
on:
|
|
issues:
|
|
types: [opened]
|
|
pull_request_target:
|
|
types: [opened]
|
|
|
|
permissions:
|
|
contents: read
|
|
issues: write
|
|
pull-requests: write
|
|
|
|
jobs:
|
|
welcome:
|
|
# Deliberately unpinned: this is our own org's shared workflow, inside the
|
|
# same trust boundary as this repository, and the point of it is that a
|
|
# change to the welcome text reaches every VocaHQ repo without 30 bumps.
|
|
# Everything third-party is pinned by SHA (tests/test_workflow_action_pins.py).
|
|
uses: VocaHQ/.github/.github/workflows/issue-welcome.yml@main
|